CVE-2016-1000002

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

gdm3 3.14.2 and possibly later has an information leak before screen lock

Metrics

CVSS 3.1 2.4/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000002Exploit, Issue Tracking, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2016-1000002Issue Tracking, Third Party Advisory
https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000002.jsonThird Party Advisory
https://security-tracker.debian.org/tracker/CVE-2016-1000002Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000002Exploit, Issue Tracking, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2016-1000002Issue Tracking, Third Party Advisory
https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000002.jsonThird Party Advisory
https://security-tracker.debian.org/tracker/CVE-2016-1000002Third Party Advisory

Timeline

Published: Nov 5, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-10000039.8Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code.CVE-2016-10000049.8Insufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode and simplexml_import_dom. This issue affec CVE-2016-10000059.8mcrypt_get_block_size did not enforce that the provided "module" parameter was a string, leading to type confusion if other types of data we CVE-2016-10000069.8hhvm before 3.12.11 has a use-after-free in the serialize_memoize_param() and ResourceBundle::__construct() functions.CVE-2016-10000076.1Pagure 2.2.1 XSS in raw file endpoint CVE-2016-10000097.5TP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net. Please note that these domains are physically printed on ma CVE-2016-10000279.8Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untru CVE-2016-10000284.8Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would only potentially impac CVE-2016-10000294.8Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would potentially impact oth CVE-2016-10000309.8Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutl CVE-2016-10000319.8Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution CVE-2016-10000327.5TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple